https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_9.png

BilalXulfiqar

Security Researcher

Contact Me

High

1

Total

Medium

4

Total

$2.51K

Total Earnings

#1166 All Time

2x

Payouts

regular

2x

Top 50

All

Sherlock

Apr '26

XRP Ledger - April 2026

XRP Ledger - April 2026

2,509.91 USDC • 3 total findings • Sherlock • BilalXulfiqar

#28

medium

Confidential Transfers for MPT: clearing lsfMPTCanConfidentialAmount at zero confidential outstanding amount locks holders’ public MPToken balances

medium

otherwise-valid `SponsorshipTransfer` forms targeting a Vault are admitted by preclaim and rejected by the `ValidVault` invariant, trapping sponsors who co-sign Vault creation

medium

legacy SignerList sponsorship under-charges create at 1 ReserveCount but refunds 2 + signer_count on delete, inflating pre-funded quota

Mar '26

Current Finance

Current Finance

0.18 USDC • 2 total findings • Sherlock • BilalXulfiqar

#29

high

Liquidation Uses EMA for Eligibility but Spot for Seizure, Delaying Liquidation During Fast Drops and Over-Seizing Once It Opens

medium

ADL Activation Uses Global Reserve Debt Instead of Group-Level Debt, Causing Cross-Group Misfires